Asterisk: multiple vulnerabilities

[Faidon Liambotis]

Stefan Fritsch wrote:
> On Saturday 18 August 2007, Tzafrir Cohen wrote:
>> That said, I see really no point in supporting Asterisk 1.2 on
>> Lenny. Asterisk 1.4 is by now stable and the officially-blessed
>> version by upstream. We should not waste too many efforts on trying
>> to maintain an obsolete version in Testing. What exactly is
>> stopping the Sid package of Asterisk from getting into Lenny?
> 
> Among other things, it depends on openh232 which seems to FTBFS on 
> mipsel because of toolchain issues (assertion failed in ld) [1]. I 
> don't expect that this is going to be resolved soon, but asking the 
> mipsel porters might be a good idea.
Oh, it gets more complicated than that.

asterisk-h323 doesn't work _at all_ on architectures that it is built
(#435146).
The fix is unkown and non-trivial, at least for me or the other pkg-voip
members, unfortunately.

We're inclined on disabling the module but that would leave unstable
(and therefore testing) without the H.323 channel.

So this is our plan B, with plan A being to contact upstream.

Regards,
Faidon